PRISMATECH SHIELD / Developers

Authentication and credentials

Hashed keys and explicit permissions.

Bearer and scopes

Set Authorization: Bearer only on the server. login:check and action:check are examples of existing scopes. Never put a key in a URL, browser storage, or logs.

Lifecycle

Project and tenant boundaries, expiry, rotation, and revocation remain authoritative. Revoke and replace a key if the one-time display is lost.

POST /v1/evaluate/login
Authorization: Bearer EXAMPLE_ONLY_NOT_REAL
Idempotency-Key: synthetic-login-0001
Content-Type: application/json

{"userId":"synthetic-user","failedAttempts":0}

Public registration and email verification are not yet approved. Existing customers use the customer portal. No accounts or keys are created here.